Руководство Пользователя для Cisco Cisco Content Security Management Appliance M160

Скачать
Страница из 441
 
8-14
AsyncOS 8.1 for Cisco Content Security Management User Guide
Chapter 8      Centralized Policy, Virus, and Outbreak Quarantines
  Managing Policy, Virus, and Outbreak Quarantines
Alerts About Quarantine Disk-Space Usage 
An alert is sent whenever the total size of the policy, virus, and outbreak quarantine reaches or passes 
75 percent, 85 percent, and 95 percent of its capacity. The check is performed when a message is placed 
in the quarantine. For example, if adding a message to a quarantine increases the size to or past 
75 percent of the total capacity, an alert is sent. 
For more information about Alerts, see 
Policy Quarantines and Logging
AsyncOS individually logs all messages that are quarantined:
Info: MID 482 quarantined to "Policy" (message filter:policy_violation)
The message filter or Outbreak Filters feature rule that caused the message to be quarantined is placed 
in parentheses. A separate log entry is generated for each quarantine in which the message is placed.
AsyncOS also individually logs messages that are removed from quarantine:
Info: MID 483 released from quarantine "Policy" (queue full) 
Info: MID 484 deleted from quarantine "Anti-Virus" (expired)
 
Total amount of space currently used 
by all quarantines  
Choose Management Appliance > Centralized Services > 
System Status
Amount of space currently used by 
each quarantine 
Choose  Email > Message Quarantine > Policy, Virus, and 
Outbreak Quarantines
, click the quarantine name, and look 
for this information in the table row directly below the 
quarantine name. 
Total number of messages currently in 
all quarantines  
Choose Management Appliance > Centralized Services > 
System Status
Number of messages currently in each 
quarantine
Choose Email > Message Quarantine > Policy, Virus, and 
Outbreak Quarantines
 and look at the table row for the 
quarantine. 
Total CPU usage by all quarantines  
Choose Management Appliance > Centralized Services > 
System Status
 and look in the System Information section. 
Date and time when the last message 
entered each quarantine (excluding 
moves between quarantines)
Choose Email > Message Quarantine > Policy, Virus, and 
Outbreak Quarantines
 and look at the table row for the 
quarantine. 
Date a policy quarantine was created 
Choose  Email > Message Quarantine > Policy, Virus, and 
Outbreak Quarantines
, click the quarantine name, and look 
for this information in the table row directly below the 
quarantine name. 
Creation date and creator name are not available for 
system-created quarantines. 
Name of policy quarantine creator 
Filters and message actions associated 
with a quarantine 
To View 
Do This